Redhat Service Interconnect — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Service Interconnect, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2023-5056 — CVSS 6.8 (medium): A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an…
• CVE-2024-6535 — CVSS 5.3 (medium): A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the…